Agent-Zero vulnerabilities

CVE-2025-55523 [LOW] CWE-22 CVE-2025-55523: An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to ex An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

CVE-2026-30624 [HIGH] CWE-77 CVE-2026-30624: Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configur Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature. The application allows users to define MCP servers using a JSON configuration containing arbitrary command and args values. These values are executed by the application when the configuration is applied without sufficient validation or res

CVE-2025-3547 [MEDIUM] CWE-22 CVE-2025-3547: A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2. This vulnerability aff A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2. This vulnerability affects unknown code of the file /get_work_dir_files. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-55524 [HIGH] CWE-732 CVE-2025-55524: Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspec Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

CVE-2025-6166 [LOW] CWE-22 CVE-2025-6166: A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This is A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the function image_get of the file /python/api/image_get.py. The manipulation of the argument path leads to path traversal. Upgrading to version 0.8.4.1 is able to address this issue. The identifier of the patch is 5db74202d632306a883ccce7339c5b